WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...

Testimonial Slider <= 1.2.4 - Authenticated SQL Injection

During the security analysis, ThunderScan discovered SQL injection vulnerability in Testimonial Slider WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plugin...

CVE-2017-12131

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

crittercozy.com XSS vulnerability

Vulnerable URL: http://www.crittercozy.com/CritterCozy-SendTestimonial.php?prodname=%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9480753 VIP website status:| No...

Cross-site scripting vulnerability in wordpress plugin rotating-testimonial

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin rotating-testimonial suffers from a cross-site scripting vulnerability due to improper filtering of user...

gourmandine.info XSS vulnerability

Vulnerable URL: http://www.gourmandine.info/testimonial.php?lang=prompt'OPENBUGBOUNTY'...

WordPress Gallery Master 1.0.22 Cross Site Scripting

Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New SGallery In Gallery Title Input And Gallery Description Place Your JavaScript Code After Creating Gallery JavaScript Code Will Be Executed . Plugin Is Accessable By Authors , Administartors , Editors...

Testimonial Slider <= 1.2.1 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF

This vulnerability needs administrator privileges to exploit. Editor and author roles do not have the necessary permissions to create new sliders, contrary to what the original advisory says. However, this vulnerability can be exploited by a malicious actor by combining the XSS with CSRF to...

WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities

This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities

This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Testimonial Slider 1.2.1 Cross Site Scripting

GhostMail Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New Slider In Slider Name Input Place Your JavaScript Code After Creating Slider JavaScript Code Will Be Executed . Image POC : Vulnerable Code : Slider ID = For Patching : Slider ID = This...

Concrete CMS: Stored XSS in Bio/Quote

XSS payload can be executed and saved permanently in testimonial Bio/Quote. Poc code: "...

Concrete CMS: Stored XSS In Company URL

XSS payload can be executed and saved permanently in testimonial Company URL. Poc code: "...

Concrete CMS: Stored XSS in testimonial Company

XSS payload can be executed and saved permanently in testimonial Company. Poc code: "...

Concrete CMS: Stored XSS in Testimonial Position

XSS payload can be executed and saved permanently in Testimonial Position. Poc code: "...

Concrete CMS: Stored XSS in Testimonial name

XSS payload can be executed and saved permanently in Testimonial name. Poc code: "...

IndiaNIC Testimonial 2.2 - iNIC_testimonial_save Action Multiple Parameter XSS

The Testimonial WordPress plugin was affected by an iNICtestimonialsave Action Multiple Parameter XSS security vulnerability...

IndiaNIC Testimonial 2.2 - testimonial.php custom_query Parameter SQL Injection

The Testimonial WordPress plugin was affected by a testimonial.php customquery Parameter SQL Injection security vulnerability...

IndiaNIC Testimonial 2.2 - Setting Manipulation CSRF

The Testimonial WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

joomla component cgtestimonial 2.2 - Multiple Vulnerabilities

No description provided by source. cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Dat...